FY21 ESG Disclosures July 2022 Unaudited 45 to Stop Work if they believe that there is uncontrolled risk to themselves, others, the environment, or the community. Jacobs has integrated procedures and processes for managing health and safety, environmental, motor vehicle and security-related incidents. Requirements and responsibilities for the following elements are specified in HSE and Security Incident Management procedures.  Incident Response, which includes emergency actions, coordination with local authorities, and site control actions.  Notification, which includes immediate verbal notification to supervisor, and timely notification of management, clients, government authorities, and other groups as necessary depending on the nature of the incident.  Reporting, which includes written reports, data entry to Intelex along with preliminary hazard classification to initiate automated workflows.  Investigation and Analysis of work-related injuries, ill health, diseases and incidents , which includes, through the use of established processes and suitably competent persons, gaining an understating of what happened, why the incident occurred and what actions can be identified to prevent it from happening again.  Communication, which includes communication of the incident and analysis findings to site personnel.  Records, which includes written reports and inclusion of incident information and actions in the Intelex information management system. Occupational Health Services Jacobs has specialized occupational health service providers and internal specialists to aid in the identification of occupational health hazards and ongoing risk management where applicable. Competency requirements are completed in accordance with Jacobs’ Competency Framework within operations, along with identification of core HSE competencies, maintenance of a competency needs assessment, assessment and verification of competency, and maintenance of competency records. Service providers are assessed through Jacobs’ procurement management processes and are required to achieve the standards and licensing/permit requirements applicable to them in the jurisdiction where they operate. We maintain personal health related information in accordance with Jacobs’ privacy and records management policies and legislated requirements for the jurisdiction where we operate, for example, the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Emergency Procedures and Plans The integration of actions to prepare for and respond to emergency situations is managed via our Global Resilience program. This process establishes companywide emergency management requirements including Crisis Management, Business Continuity, and formation of Emergency Response and Management Teams. Jacobs’ locations and project sites prepare emergency response plans for potential site emergencies such as medical emergencies, fires, spills, extreme weather, personal security threats and similar credible events. These plans are typically included as part of the project or office plans, inclusive of health and safety, environment, and security plans for the location and include emergency management information based on the assessed risks at site. Training to support Jacobs’ Emergency Management and Business Continuity commences with our onboarding program and continues with awareness training available for all employees and required courses for HSE and emergency and crisis management teams. It extends to local drills, annual scenario